Method and System for Protecting Sensitive Information and Preventing Unauthorized Use of Identity Information

1. A method of obtaining a piece of an information holder's sensitive information stored in an information source computer system using a virtual identifier that corresponds to a piece of said information holder's static information, comprising: a) receiving from a first device of said information holder, said piece of static information of said information holder by a processing entity computer system; b) authenticating said information holder by said processing entity computer system using an authentication protocol and receiving validity information from said first device of said information holder or a second device of said information holder; c) creating said virtual identifier by said processing entity computer system; d) linking said virtual identifier to said information holder's static information and said validity information by a data management system; e) transmitting said virtual identifier from said processing entity computer system to said first device of said information holder, said second device of said information holder or a third device of said information holder; f) receiving by said processing entity computer system a request for said piece of sensitive information of said information holder with said virtual identifier from a first device of a third party; g) identifying by said processing entity computer system said static information of said information holder using said virtual identifier; h) validating said virtual identifier by said processing entity computer system using said validity information; i) transmitting a request for obtaining said piece of sensitive information of said information holder to said information source computer system by said processing entity computer system; j) receiving said piece of sensitive information of said information holder from said information source computer system in response to said request for obtaining said piece of sensitive information; k) transmitting said piece of sensitive information of said information holder to said first device of said third party or a second device of said third party from said processing entity computer system.

2. The claim as recited in claim 1 further comprising: receiving a request for said virtual identifier from said information holder by said processing entity computer system.

3. The method as recited in claim 2 , further comprising: updating said virtual identifier's validity status by said processing entity computer system.

4. The method as recited in claim 3 , further comprising: receiving said information holder's registration information and issuing a user ID to said information holder by said processing entity computer system.

5. The method as recited in claim 1 , wherein said third party is the first party requesting for said piece of sensitive information and said third party has submitted said request for said piece of sensitive information to said processing entity computer system.

6. The method as recited in claim 5 , wherein step g) is conducted through mapping said virtual identifier to said static information by said processing entity computer system.

7. The method as recited in claim 6 , wherein said piece of static information comprises a social security number.

8. The method as recited in claim 6 , wherein said validity information comprises specification on the time period in which said virtual identifier is valid to obtain information.

9. The method as recited in claim 6 , wherein said validity information comprises specification on the number of times said virtual identifier being valid to obtain information.

10. The method as recited in claim 6 , wherein said virtual identifier is valid for multiple-time or one-time for requesting for sensitive information of said information holder.

11. The method as recited in claim 5 wherein said virtual identifier comprises a field of a randomly generated string.

12. The method as recited in claim 5 , wherein step e) is conducted through a public network.

13. The method as recited in claim 5 , wherein step f) is conducted through a public network.

14. The method as recited in claim 13 wherein said public network is the Internet.

15. The method as recited in claim 5 , wherein said virtual identifier comprises validity attributes.

16. The method as recited in claim 5 , wherein said virtual identifier comprises a field that identifies said information holder.

17. The method as recited in claim 5 , wherein said virtual identifier comprises a field that indicates information sources.

18. A method of obtaining a piece of an information holder's sensitive information stored in an information destination computer system using a virtual identifier that corresponds to a piece of said information holder's static information, comprising: a) receiving from a first device of said information holder, said piece of static information of said information holder by a processing entity computer system; b) authenticating said information holder by said processing entity computer system using an authentication protocol and receiving validity information from said first device of said information holder or a second device of said information holder; c) creating said virtual identifier by said processing entity computer system; d) linking said virtual identifier to said information holder's static information and said validity information by a data management system; e) transmitting said virtual identifier from said processing entity computer system to said first device of said information holder, said second device of said information holder or a third device of said information holder; f) receiving by said information destination computer system a request for said piece of sensitive information of said information holder with said virtual identifier from a third party device; g) receiving by said processing entity computer system a request for said piece of static information of said information holder with said virtual identifier from said information destination computer system; h) identifying by said processing entity computer system said static information of said information holder using said virtual identifier; i) validating said virtual identifier by said processing entity computer system using said validity information; j) transmitting said piece of static information of said information holder from said processing entity computer system to said information destination computer system.